cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.9.28.146 Par Nicolas Coolman (2015/09/28)
~ Démarré par NKOGHE REGIS (Administrator) (2015/09/29 11:54:08)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Pas de fichier réseau
~ Mode: Scanner
~ Rapport: C:\Users\NKOGHE REGIS\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 8 Pro N, 32-bit (Build 9200)

---\\ Navigateurs Internet (2) - 2s
GCIE: Google Chrome v43.0.2357.130
MSIE: Internet Explorer v10.0.9200.17377

---\\ Informations sur les produits Windows (3) - 3s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Automatic Updates : OK

---\\ Logiciels de protection (3) - 200s
avast! Free Antivirus v5.0.418.0
SMADAV version 9.7.1 v9.7.1
Windows Defender W8 (Deactivate)

---\\ Surveillance de Logiciels (2) - 233s
Adobe Flash Player 11 ActiveX & Plugin
Adobe Reader XI

---\\ Informations sur le système (6) - 1s
~ Operating System: x86 Family 20 Model 2 Stepping 0, AuthenticAMD
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3655.024 MB (40% free)
~ System Restore: Activé (Enable)
~ System drive C: has 6 GB free of 149 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: NKRP
~ User Name: NKOGHE REGIS
~ Logged in as Administrator

---\\ Enumération des unités disques (6) - 1s
~ Drive C: has 6 GB free of 149 GB (System)
~ Drive D: has 101 GB free of 155 GB
~ Drive F: has 2 GB free of 3 GB
~ Drive G: has 289 GB free of 476 GB
~ Drive H: has 5 GB free of 7 GB
~ Drive I: has GB free of 0 GB

---\\ Etat du Centre de Sécurité Windows (11) - 4s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: Modified
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (24) - 21s
[MD5.EAFE46B0292D2BD2467835E2ACF717CC] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2106176] ©
[MD5.224F6B374852153C8C24BED141AE3A20] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [48640] ©
[MD5.7109FF769FFF962869C50D720F7AA7D7] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [101376] ©
[MD5.B35C734515AA416DA9DDA96082694B00] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1763328] ©
[MD5.89D6AFD5B257049375008BAA512910EE] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [429056] ©
[MD5.FAB11E1AC62579A9BE21593319F8E464] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [246784] ©
[MD5.0BE9606A1175C7400ED862991453A847] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [458240] ©
[MD5.65AA2DE8787146679BB8A7D14BFFB6A3] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [18944] ©
[MD5.B92C9A8C3CAE22129CC5B4A920B00608] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [439296] ©
[MD5.48D8C3F2006698691F5AE0BB595FDCC8] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [22768] ©
[MD5.00B4FA77732C7823D292ECD672660882] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [89088] ©
[MD5.4E707EC5071DD8F5C29A7410780BD4C3] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [135680] ©
[MD5.E608E26B536A42B5ACC145D25CB9F2AC] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [92160] ©
[MD5.6BFEBBA25AD34E5922E60349C721B1DD] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [62464] ©
[MD5.11EDC37780E8A2F8E311D73F7658A4D7] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [89600] ©
[MD5.57B0C0D982013C72911A3F5CBA795034] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [126976] ©
[MD5.1A04B8E0C9156FB742BA41DD71C40F28] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\Windows\System32\drivers\MRxSmb.sys [340992] ©
[MD5.303A053C25E468B9925C22288BEF8484] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [254464] ©
[MD5.6C816842AC5E2B0E033ED0BD1058E077] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1618264] ©
[MD5.8BCE63AF5B52642E832630F862DE96EF] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [90624] ©
[MD5.6E0649D7325D85C47C844EB3267E4625] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [88064] ©
[MD5.2CAD2A13569741C67CD9C52F97E0F992] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\Windows\System32\drivers\rdpdr.sys [156160] ©
[MD5.0886D9F1B5A5334FBB143A260E4BFB5C] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [97792] ©
[MD5.BF079843E272759BAE587FB980163293] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [281408] ©

---\\ Processus lancés (40) - 207s
[MD5.BC8C942A1E94BCFED3AABAC04E12FC84] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [219136] [PID.868] ©
[MD5.61D3B90C1600165110470502835FB646] - (.ALWIL Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384] [PID.1392] ©
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.1840] ©
[MD5.F431DC5D94F4B2FDBC927655D8A9B10E] - (.Autodesk, Inc. - Content Service.) -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [19232] [PID.1880] ©
[MD5.ADA5425CF8DB24B151A2E5B7F0500C30] - (.Solid Documents, LLC - Solid Spool Service.) -- C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe [164136] [PID.416]
[MD5.9DA3B55B17B54789AFB8C657D4ACE4D7] - (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) -- C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688] [PID.760] ©
[MD5.F1D29D9C5DB9C144769F5CD7212BE555] - (.VMware, Inc. - VMware NAT Service.) -- C:\Windows\System32\vmnat.exe [435864] [PID.1080] ©
[MD5.03A7980C30E9F00F1EAC752612DC80CE] - (.VMware, Inc. - VMware VMnet DHCP service.) -- C:\Windows\System32\vmnetdhcp.exe [357016] [PID.1268] ©
[MD5.A77A76DD2773616651121B7EFA5948C1] - (.VMware, Inc. - VMware USB Arbitration Service.) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe [719512] [PID.1756] ©
[MD5.341D98E20B8D859075AE94B1E0B25788] - (.Connectify - Connectify Service Stub.) -- C:\Program Files\Connectify\ConnectifyService.exe [487936] [PID.1936] ©
[MD5.68C9FB18EC34AC508C097412E5A797F5] - (.Connectify - Connectify Daemon Service.) -- C:\Program Files\Connectify\ConnectifyD.exe [3358456] [PID.2240] ©
[MD5.7171B884DA8BFB1CE5C8BAE46D993CB1] - (.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe [79872] [PID.2340] ©
[MD5.5C6121C09B35B01705EEF7B948B92338] - (...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe [15680000] [PID.2660]
[MD5.8715A0D10CFFC8DEE923957F07DAA042] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe [244040] [PID.4040] ©
[MD5.2583F9A2B7309D586F8E8AD81C3F7C51] - (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files\VMware\VMware Workstation\vmware-tray.exe [104088] [PID.1224] ©
[MD5.9F9F7AE92A2BC837DE65FB563580ABDE] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11951176] [PID.2116] ©
[MD5.413B0C83F1D03F44CEF8DDE1B73B5C40] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2428656] [PID.932] ©
[MD5.567EA8020BA66BFA8C5C542B23E95D11] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [143088] [PID.828] ©
[MD5.9CDE2ABE882552237FD5B6A0C4543543] - (.Connectify - Connectify Dispatch.) -- C:\Program Files\Connectify\DispatchUI.exe [2383608] [PID.56] ©
[MD5.1DBDD460D61A2A447E55D3D9901BB912] - (.Connectify - Connectify Hotspot.) -- C:\Program Files\Connectify\Connectify.exe [4314360] [PID.2800] ©
[MD5.31B522014FC560C122CDFA72D47CA940] - (.Ask - Ask Updater.) -- C:\Program Files\Ask.com\Updater\Updater.exe [1391272] [PID.3964] =>Toolbar.Ask
[MD5.318270684C812E88FE63DC4C3021FC2B] - (.ALWIL Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2756488] [PID.688] ©
[MD5.1DB3300FE6EF0D52ECABBB903FCA6A41] - (.DriverPack Solution - DRP Su Updater.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu\DrvUpdater.exe [195256] [PID.4504]
[MD5.D312C6D1DBBE666A9F3481CC85D3D493] - (.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\Program Files\Le Robert\Le Petit Robert 2014\PetitRobertHA.exe [729088] [PID.4524]
[MD5.275F70AF9857755E0440137FB3A6D2C8] - (.FreeDownloadManager.ORG - Free Download Manager.) -- C:\Program Files\Free Download Manager\fdm.exe [6983168] [PID.4544] ©
[MD5.302794AB66901121BD0D4F877A68CE20] - (...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe [561664] [PID.4552]
[MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.5484] ©
[MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.5156] ©
[MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.5084] ©
[MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.4820] ©
[MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.4100] ©
[MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.1456] ©
[MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.3484] ©
[MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.4564] ©
[MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.4112] ©
[MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.4280] ©
[MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.3960] ©
[MD5.BEB274EF932F3AD40F15AE7DCD1F53DA] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP\ZHPDiag3.exe [1939968] [PID.7348] ©
[MD5.BEB274EF932F3AD40F15AE7DCD1F53DA] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP\ZHPDiag3.exe [1939968] [PID.5152] ©
[MD5.E1B44A75947137F4143308D566889837] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] [PID.2748] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (9) - 28s
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 26s
P2 - FPN: [HKLM] [@adobe.com/AuthorwarePlayer] - (.Macromedia, Inc..) -- C:\Windows\System32\Macromed\AUTHORWA\np32asw.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (11) - 42s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} Orphean
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer,Proxy Management (5) - 9s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = di-isa:8080
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (4) - 4s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ©
F3 - REG:win.ini: load=C:\ProgramData\mspnri.exe

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (5) - 18s
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files\Microsoft Office\Office15\OCHelper.dll ©
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL ©
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} . (.FreeDownloadManager.ORG - .) -- C:\Program Files\Free Download Manager\iefdm2.dll ©
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL ©
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.AsktBar

---\\ Internet Explorer, Barre d'outil (1) - 23s
O3 - Toolbar: 0x00 - [HKLM]{D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.Ask

---\\ Applications lancées au démarrage du système (17) - 128s
O4 - HKLM\..\Run: [vmware-tray.exe] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files\VMware\VMware Workstation\vmware-tray.exe ©
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe ©
O4 - HKLM\..\Run: [fspuip] . (.Sentelic Corporation - Finger-sensing Pad User Interactive Program.) -- C:\Program Files\FSP\FspUip.exe
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ©
O4 - HKLM\..\Run: [Autodesk Sync] . (.Autodesk, Inc. - Autodesk Sync.) -- C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe ©
O4 - HKLM\..\Run: [Connectify Dispatch] . (.Connectify - Connectify Dispatch.) -- C:\Program Files\Connectify\DispatchUI.exe ©
O4 - HKLM\..\Run: [Connectify Hotspot] . (.Connectify - Connectify Hotspot.) -- C:\Program Files\Connectify\Connectify.exe ©
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe ©
O4 - HKCU\..\Run: [DrvUpdater] . (.DriverPack Solution - DRP Su Updater.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu\DrvUpdater.exe
O4 - HKCU\..\Run: [Le Petit Robert V4 Hyperappel] . (.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\Program Files\Le Robert\Le Petit Robert 2014\PetitRobertHA.exe
O4 - HKCU\..\Run: [Free Download Manager] . (.FreeDownloadManager.ORG - Free Download Manager.) -- C:\Program Files\Free Download Manager\fdm.exe ©
O4 - HKCU\..\Run: [d5a38e9b5f206c41f8851bf04a251d26] . (...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe
O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe ©
O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [DrvUpdater] . (.DriverPack Solution - DRP Su Updater.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu\DrvUpdater.exe
O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [Le Petit Robert V4 Hyperappel] . (.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\Program Files\Le Robert\Le Petit Robert 2014\PetitRobertHA.exe
O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [Free Download Manager] . (.FreeDownloadManager.ORG - Free Download Manager.) -- C:\Program Files\Free Download Manager\fdm.exe ©
O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [d5a38e9b5f206c41f8851bf04a251d26] . (...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe

---\\ Protocole additionnel (24) - 27s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll ©
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL ©
O18 - Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files\Microsoft Office\Office15\MSOSB.DLL ©
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL ©

---\\ Liste des services NT non Microsoft et non désactivés (13) - 48s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe ©
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe ©
O23 - Service: Autodesk Content Service (Autodesk Content Service) . (.Autodesk, Inc. - Content Service.) - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe ©
O23 - Service: avast! Antivirus (avast! Antivirus) . (.ALWIL Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe ©
O23 - Service: Connectify (Connectify) . (.Connectify - Connectify Service Stub.) - C:\Program Files\Connectify\ConnectifyService.exe ©
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe ©
O23 - Service: SolidPDFCreatorReadSpool (SPDFCreatorReadSpool) . (.Solid Documents, LLC - Solid Spool Service.) - C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe ©
O23 - Service: VMware Authorization Service (VMAuthdService) . (.VMware, Inc. - VMware Authorization Service.) - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe ©
O23 - Service: VMware DHCP Service (VMnetDHCP) . (.VMware, Inc. - VMware VMnet DHCP service.) - C:\Windows\System32\vmnetdhcp.exe ©
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc. - VMware USB Arbitration Service.) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe ©
O23 - Service: VMware NAT Service (VMware NAT Service) . (.VMware, Inc. - VMware NAT Service.) - C:\Windows\System32\vmnat.exe ©
O23 - Service: VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe

---\\ Logiciels installés (95) - 2268s
O42 - Logiciel: Adobe Flash Player 11 ActiveX & Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Shockwave Player + Authorware Web Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player + Authorware Web Player ©
O42 - Logiciel: AIMP3 - (.AIMP DevTeam.) [HKLM] -- AIMP3 ©
O42 - Logiciel: AutoCAD Electrical 2013 - Français (French) - (.Autodesk.) [HKLM] -- AutoCAD Electrical 2013 - Français (French) ©
O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM] -- Autodesk Content Service ©
O42 - Logiciel: Autodesk Design Review 2013 - (.Autodesk, Inc..) [HKLM] -- Autodesk Design Review 2013 ©
O42 - Logiciel: Autodesk Inventor Fusion 2013 - (.Autodesk, Inc..) [HKLM] -- Autodesk Inventor Fusion 2013 ©
O42 - Logiciel: Autodesk Inventor View 2013 Français (French) - (.Autodesk.) [HKLM] -- Autodesk Inventor View 2013 ©
O42 - Logiciel: Autodesk Vault Basic 2013 (Client) - (.Autodesk.) [HKLM] -- Autodesk Vault Basic 2013 (Client) ©
O42 - Logiciel: avast! Free Antivirus v5.0.418.0 - (.Alwil Software.) [HKLM] -- avast5 ©
O42 - Logiciel: BurnAware Free 6.3 - (.Burnaware Technologies.) [HKLM] -- BurnAware Free
O42 - Logiciel: Connectify - (.Connectify.) [HKLM] -- Connectify ©
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM] -- DAEMON Tools Lite ©
O42 - Logiciel: DWG TrueView 2013 - (.Autodesk.) [HKLM] -- DWG TrueView 2013 ©
O42 - Logiciel: Foxit Reader 6.0.3.524 - (.oszone.net.) [HKLM] -- Foxit Reader
O42 - Logiciel: Free Download Manager 3.9.4 - (.FreeDownloadManager.ORG.) [HKLM] -- Free Download Manager_is1 ©
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome ©
O42 - Logiciel: Pixia 6 English Edition - (.Isao Maruoka / Soldier.) [HKLM] -- InstallShield_{D31DBA6A-7212-42EF-82F2-336F3D2BF7E9}
O42 - Logiciel: Intel Android Device USB driver - (.Intel.) [HKLM] -- Intel Android Device USB driver ©
O42 - Logiciel: MAGIX Photo Designer 7 - (.MAGIX AG.) [HKLM] -- MAGIX_{EFC6F303-00C1-45CC-BD98-FCA1C3127F9B} ©
O42 - Logiciel: Microsoft Project Professionnel 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PRJPRO ©
O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2013 - (.Autodesk.) [HKLM] -- Plug-in Autodesk Inventor Fusion pour AutoCAD 2013 ©
O42 - Logiciel: Le Petit Robert 2014 - (.Le Robert.) [HKLM] -- PR1CD2014 ©
O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller ©
O42 - Logiciel: SAM CoDeC Pack - (.www.SamLab.ws.) [HKLM] -- SAM CoDeC Pack
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey ©
O42 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix
O42 - Logiciel: Ut Video Codec Suite - (.UMEZAWA Takeshi.) [HKLM] -- utvideo_is1
O42 - Logiciel: VLC media player 2.0.3 - (.VideoLAN.) [HKLM] -- VLC media player ©
O42 - Logiciel: VMware Workstation - (.VMware, Inc.) [HKLM] -- VMware_Workstation ©
O42 - Logiciel: Windows 8 Activator 380 day 2.00 - (.© 2012 Microsoft.) [HKLM] -- Windows 8 Activator 380 day 2.00
O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM] -- WinPcapInst ©
O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver
O42 - Logiciel: x264vfw - H.264/MPEG-4 AVC codec (remove only) - (...) [HKLM] -- x264vfw
O42 - Logiciel: Xvid MPEG-4 Video Codec - (...) [HKLM] -- Xvid_is1
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} ©
O42 - Logiciel: tools-freebsd - (.VMware, Inc..) [HKLM] -- {003BFBBD-6C67-419E-A24D-0DCAFC3A5249} ©
O42 - Logiciel: VMware Workstation - (.VMware, Inc..) [HKLM] -- {0D94F75A-0EA6-4951-B3AF-B145FA9E05C6} ©
O42 - Logiciel: Autodesk Material Library 2013 - (.Autodesk.) [HKLM] -- {117EBEEB-5DB0-43C8-9FD6-DD583DB152DD} ©
O42 - Logiciel: tools-netware - (.VMware, Inc..) [HKLM] -- {197597A7-AD33-4898-9D8E-73066818B464} ©
O42 - Logiciel: 7-Zip 9.30 - (.Igor Pavlov.) [HKLM] -- {23170F69-40C1-2701-0930-000001000000} ©
O42 - Logiciel: Module linguistique d'Autodesk Vault Basic 2013 (Client) - Français - (.Autodesk.) [HKLM] -- {266597A9-1732-0000-0100-DCBF2B69166B} ©
O42 - Logiciel: Solid Converter v8 - (.Solid Documents.) [HKLM] -- {2E809338-A85B-45D8-AFAB-57019D929445}_is1 ©
O42 - Logiciel: Google Earth Pro - (.Google.) [HKLM] -- {35DAA04C-1720-4BE3-A920-A03731EC6A1D} ©
O42 - Logiciel: Video Download Capture version 4.9.1 - (.APOWERSOFT LIMITED.) [HKLM] -- {3C9D008D-3716-4C3F-90CD-38ED57568FAB}_is1 ©
O42 - Logiciel: AutoCAD Electrical 2013 - Français (French) - (.Autodesk.) [HKLM] -- {5783F2D7-B007-040C-0002-0060B0CE6BBA} ©
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2013 - (.Autodesk.) [HKLM] -- {606E12B9-641F-4644-A22A-FF38AE980AFD} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: Autodesk Content Service Language Pack - (.Autodesk.) [HKLM] -- {62F029AB-85F2-0001-866A-9FC0DD99DDBC} ©
O42 - Logiciel: Autodesk Inventor View 2013 - (.Autodesk.) [HKLM] -- {7F4DD591-1732-0004-0000-7107D70F3DB4} ©
O42 - Logiciel: Module linguistique d' Autodesk Inventor View 2013 - Français (French) - (.Autodesk.) [HKLM] -- {7F4DD591-1732-0004-1036-7107D70F3DB4} ©
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} ©
O42 - Logiciel: Plug-in Autodesk Inventor Fusion pour AutoCAD 2013 - (.Autodesk.) [HKLM] -- {82C1E6E4-6718-4EFD-9DCC-E276D690EF46} ©
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE} =>Toolbar.AsktBar
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} ©
O42 - Logiciel: SMADAV version 9.7.1 - (.SmadSoft.) [HKLM] -- {8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1
O42 - Logiciel: Update for Skype for Business 2015 (KB3054791) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{04ADDEC1-208F-4295-AA61-16789EA56814} ©
O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0015-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0016-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0018-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0019-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-001A-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-001B-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0044-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0090-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00A1-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00BA-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-012B-040C-0000-0000000FF1CE} ©
O42 - Logiciel: Update for Skype for Business 2015 (KB3054791) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{04ADDEC1-208F-4295-AA61-16789EA56814} ©
O42 - Logiciel: Update for Skype for Business 2015 (KB2889853) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{AE1BB975-11D1-49A0-82E8-1D26DD62AFE7} ©
O42 - Logiciel: FARO LS 1.1.406.58 - (.FARO Scanner Production.) [HKLM] -- {951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C} ©
O42 - Logiciel: Realtek WLAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {9D3D8C60-A55F-4fed-B2B9-173001290E16} ©
O42 - Logiciel: tools-solaris - (.VMware, Inc..) [HKLM] -- {AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130} ©
O42 - Logiciel: Adobe Reader XI (11.0.11) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} ©
O42 - Logiciel: tools-winPre2k - (.VMware, Inc..) [HKLM] -- {AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D} ©
O42 - Logiciel: simplitec simplicheck - (.simplitec GmbH.) [HKLM] -- {C4EE86B9-8D74-4689-B6F6-B94FBC55AF02}
O42 - Logiciel: Autodesk Vault Basic 2013 (Client) - (.Autodesk.) [HKLM] -- {CF526A26-1732-0000-0000-02E95019B628} ©
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} ©
O42 - Logiciel: tools-linux - (.VMware, Inc..) [HKLM] -- {D102611A-6466-4101-A51D-51069303AC65} ©
O42 - Logiciel: Pixia 6 English Edition - (.Isao Maruoka / Soldier.) [HKLM] -- {D31DBA6A-7212-42EF-82F2-336F3D2BF7E9}
O42 - Logiciel: SolidPDFCreator - (.SolidDocuments.) [HKLM] -- {DFE70CCC-0ACB-45B7-94F4-9DC6F01B7928} ©
O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13} ©
O42 - Logiciel: Finger Sensing Pad Driver - (.Sentelic.) [HKLM] -- {E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A} ©
O42 - Logiciel: Autodesk Sync - (.Autodesk, Inc..) [HKLM] -- {EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F} ©
O42 - Logiciel: MAGIX Photo Designer 7 - (.MAGIX AG.) [HKLM] -- {EFC6F303-00C1-45CC-BD98-FCA1C3127F9B} ©
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: Lagarith Lossless Codec (1.3.27) - (...) [HKLM] -- {F59AC46C-10C3-4023-882C-4212A92283B3}_is1
O42 - Logiciel: Ecodial Advance Calculation INT V4.2 - (.Schneider Electric.) [HKLM] -- {FC7661BD-7CE8-4EAC-B80C-440C2E483A32} ©
O42 - Logiciel: Module linguistique du plug-in Autodesk Inventor Fusion pour AutoCAD 2013 - (.Autodesk.) [HKLM] -- {FE2F4875-095C-427C-9A97-4F8DE05ACF22} ©
O42 - Logiciel: tools-windows - (.VMware, Inc..) [HKLM] -- {FFD9383C-01D5-4897-A954-43AF599AED30} ©
O42 - Logiciel: Autodesk Inventor Fusion 2013 - (.Autodesk, Inc..) [HKLM] -- {FFF5619F-2013-0032-A85E-9994F70A9E5D} ©
O42 - Logiciel: DriverPack Solution Updater - (.DriverPack Solution.) [HKCU] -- DRPSu Updater
O42 - Logiciel: PhotoFiltre Studio X - (...) [HKCU] -- PhotoFiltre Studio X
O42 - Logiciel: Ask Toolbar Updater - (.Ask.com.) [HKCU] -- {79A765E1-C399-405B-85AF-466F52E918B0} =>Toolbar.AsktBar

---\\ HKCU & HKLM Software Keys (114) - 2278s
HKLM\SOFTWARE\7-Zip
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\ALWIL Software
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\APN =>Toolbar.Ask
HKLM\SOFTWARE\AskToolbar =>Toolbar.Ask
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Autodesk
HKLM\SOFTWARE\AVC
HKLM\SOFTWARE\Avg
HKLM\SOFTWARE\Connectify
HKLM\SOFTWARE\Disc Soft
HKLM\SOFTWARE\Dolby
HKLM\SOFTWARE\DTS
HKLM\SOFTWARE\Foxit Software
HKLM\SOFTWARE\FreeDownloadManager.ORG
HKLM\SOFTWARE\GetGo Software
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\IM Providers
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\IsaoMaruoka
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Knowles
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Macrovision
HKLM\SOFTWARE\MAGIX
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Nuance
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\PDFCreator
HKLM\SOFTWARE\RealNetworks
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\REALTEK Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\SAMSUNG
HKLM\SOFTWARE\simplitec
HKLM\SOFTWARE\SolidDocuments
HKLM\SOFTWARE\SonicFocus
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\Synaptics
HKLM\SOFTWARE\ThinPrint
HKLM\SOFTWARE\TOSHIBA
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\VMware, Inc.
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Waves Audio
HKLM\SOFTWARE\WinPcap
HKLM\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\AC3Filter
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\ALWIL Software
HKCU\SOFTWARE\APN =>Toolbar.Ask
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Ask.com =>Toolbar.Ask
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Autodesk
HKCU\SOFTWARE\Autodesk, Inc.
HKCU\SOFTWARE\Bytescout
HKCU\SOFTWARE\Cineform
HKCU\SOFTWARE\d5a38e9b5f206c41f8851bf04a251d26 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Disc Soft
HKCU\SOFTWARE\DownloadManager
HKCU\SOFTWARE\drpsu
HKCU\SOFTWARE\DRPSu Updater
HKCU\SOFTWARE\Foxit Software
HKCU\SOFTWARE\FreeDownloadManager.ORG
HKCU\SOFTWARE\Gabest
HKCU\SOFTWARE\GetGo Software
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Magix
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\PDFCreator
HKCU\SOFTWARE\PhotoFiltre Studio X
HKCU\SOFTWARE\RealNetworks
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Revenger inc.
HKCU\SOFTWARE\SamLab.ws
HKCU\SOFTWARE\SMADΔV
HKCU\SOFTWARE\SolidDocuments
HKCU\SOFTWARE\Sony
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\UsbFix
HKCU\SOFTWARE\Ut Video Codec Suite
HKCU\SOFTWARE\Video Download Capture
HKCU\SOFTWARE\VMware, Inc.
HKCU\SOFTWARE\VSRevoGroup
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\AskToolbar =>Toolbar.Ask
HKCU\SOFTWARE\AppDataLow\Software\Autodesk
HKCU\SOFTWARE\AppDataLow\Software\GetGo Software
HKCU\SOFTWARE\AppDataLow\Software\ThinPrint

---\\ Contenu des dossiers Programmes (192) - 1066s
O43 - CFD: 2014/08/01 16:58:48 - [] D -- C:\Program Files\7-Zip
O43 - CFD: 2014/08/01 15:47:29 - [] D -- C:\Program Files\Adobe
O43 - CFD: 2014/08/01 17:00:18 - [] D -- C:\Program Files\AIMP3
O43 - CFD: 2015/09/23 15:18:58 - [] D -- C:\Program Files\Alwil Software
O43 - CFD: 2014/09/09 17:54:31 - [] D -- C:\Program Files\Apowersoft
O43 - CFD: 2014/11/25 09:21:30 - [] D -- C:\Program Files\Ask.com =>Toolbar.Ask
O43 - CFD: 2014/08/20 19:42:41 - [] D -- C:\Program Files\Autodesk
O43 - CFD: 2014/08/01 16:59:58 - [] D -- C:\Program Files\BurnAware Free
O43 - CFD: 2014/11/25 09:21:47 - [] D -- C:\Program Files\Common Files
O43 - CFD: 2014/09/26 16:00:55 - [] D -- C:\Program Files\Connectify
O43 - CFD: 2014/08/01 12:56:31 - [] D -- C:\Program Files\DAEMON Tools Lite
O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 2014/08/01 16:59:04 - [] D -- C:\Program Files\Foxit Software
O43 - CFD: 2014/09/09 17:15:41 - [] D -- C:\Program Files\Free Download Manager
O43 - CFD: 2014/08/01 16:45:12 - [] D -- C:\Program Files\FSP
O43 - CFD: 2014/09/09 17:59:59 - [0] D -- C:\Program Files\GetGo Software
O43 - CFD: 2015/06/08 08:01:34 - [] D -- C:\Program Files\Google
O43 - CFD: 2015/09/23 18:18:32 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015/04/14 20:00:53 - [] D -- C:\Program Files\Intel Android Device USB driver
O43 - CFD: 2015/06/14 21:34:21 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 2014/08/04 09:51:05 - [] D -- C:\Program Files\Le Robert
O43 - CFD: 2014/11/25 09:21:48 - [] D -- C:\Program Files\MAGIX
O43 - CFD: 2014/08/01 15:42:11 - [] D -- C:\Program Files\Microsoft Analysis Services
O43 - CFD: 2014/08/04 09:37:01 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 2014/08/04 09:39:11 - [] D -- C:\Program Files\Microsoft SQL Server
O43 - CFD: 2014/08/20 19:31:31 - [] D -- C:\Program Files\Microsoft WSE
O43 - CFD: 2014/09/09 18:37:35 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 2015/05/30 12:00:10 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 2014/08/01 12:14:09 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 2014/08/01 15:50:47 - [] D -- C:\Program Files\PDFCreator
O43 - CFD: 2014/11/25 09:22:58 - [] D -- C:\Program Files\PhotoFiltre Studio X
O43 - CFD: 2014/11/24 13:06:43 - [] D -- C:\Program Files\Pixia ver. 6
O43 - CFD: 2015/09/15 18:31:03 - [] D -- C:\Program Files\Realtek
O43 - CFD: 2015/09/23 18:20:02 - [] D -- C:\Program Files\Realtek WLAN Driver
O43 - CFD: 2014/08/01 12:14:10 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 2014/08/01 16:56:18 - [] D -- C:\Program Files\SAM CoDeC Pack
O43 - CFD: 2015/04/14 19:28:43 - [] D -- C:\Program Files\SAMSUNG
O43 - CFD: 2014/08/01 12:46:54 - [] D -- C:\Program Files\Schneider Electric
O43 - CFD: 2014/11/25 09:21:35 - [] D -- C:\Program Files\simplitec
O43 - CFD: 2015/09/24 17:45:48 - [] D -- C:\Program Files\SMADAV
O43 - CFD: 2014/08/01 16:22:36 - [] D -- C:\Program Files\SolidDocuments
O43 - CFD: 2014/08/01 16:48:26 - [] D -- C:\Program Files\Synaptics
O43 - CFD: 2012/07/26 08:04:04 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 2014/08/01 16:55:02 - [] D -- C:\Program Files\utvideo
O43 - CFD: 2014/08/04 08:18:36 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 2014/08/01 12:35:58 - [] D -- C:\Program Files\VMware
O43 - CFD: 2014/09/09 13:58:59 - [] D -- C:\Program Files\VS Revo Group
O43 - CFD: 2015/06/04 11:13:33 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 2015/06/04 11:14:07 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 2012/07/26 10:22:34 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 2014/08/01 11:21:46 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 2014/09/08 16:58:19 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2012/07/26 08:53:15 - [] SHD -- C:\Program Files\Windows Sidebar
O43 - CFD: 2015/06/06 13:21:08 - [] HD -- C:\Program Files\WindowsApps
O43 - CFD: 2014/09/09 16:56:46 - [] D -- C:\Program Files\WinPcap
O43 - CFD: 2014/08/01 16:26:14 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 2014/08/01 16:55:07 - [] D -- C:\Program Files\x264vfw
O43 - CFD: 2014/08/01 16:55:16 - [] D -- C:\Program Files\Xvid
O43 - CFD: 2015/09/23 15:35:38 - [] D -- C:\Program Files\© 2012 Microsoft
O43 - CFD: 2014/08/01 16:58:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2014/11/05 14:44:11 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014/09/20 15:10:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/08/01 17:00:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
O43 - CFD: 2014/09/09 17:55:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft
O43 - CFD: 2014/08/20 19:46:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
O43 - CFD: 2015/09/23 15:19:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
O43 - CFD: 2014/08/01 16:59:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Free
O43 - CFD: 2014/09/26 15:53:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify
O43 - CFD: 2014/08/01 12:56:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
O43 - CFD: 2014/08/01 16:59:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
O43 - CFD: 2014/09/09 17:15:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
O43 - CFD: 2015/04/14 19:31:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/04/14 20:00:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Android Device USB driver
O43 - CFD: 2014/08/04 09:51:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Le Petit Robert 2014
O43 - CFD: 2014/11/25 09:22:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
O43 - CFD: 2012/07/26 08:53:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/08/01 15:53:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/06/12 03:20:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2014/08/01 15:50:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
O43 - CFD: 2014/11/25 09:22:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
O43 - CFD: 2014/11/24 13:00:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixia ver. 6
O43 - CFD: 2014/08/01 16:56:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAM CoDeC Pack
O43 - CFD: 2014/08/01 12:47:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schneider Electric
O43 - CFD: 2014/11/25 09:21:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
O43 - CFD: 2015/09/23 15:20:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMADAV Antivirus
O43 - CFD: 2014/08/01 16:22:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidDocuments
O43 - CFD: 2014/11/25 09:21:37 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2014/09/20 15:09:59 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2012/07/26 10:26:00 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2014/08/04 08:19:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2014/08/01 12:36:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
O43 - CFD: 2014/08/01 16:26:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2014/08/29 17:56:37 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2015/09/23 15:18:58 - [] D -- C:\ProgramData\Alwil Software
O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/09/16 19:03:00 - [] D -- C:\ProgramData\Autodesk
O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/09/15 20:10:43 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2014/09/25 12:09:18 - [] D -- C:\ProgramData\Connectify
O43 - CFD: 2014/08/01 16:12:13 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2014/08/20 19:55:29 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 2014/10/09 16:34:05 - [] D -- C:\ProgramData\Free Download Manager
O43 - CFD: 2014/08/29 17:56:52 - [0] D -- C:\ProgramData\IDM
O43 - CFD: 2015/04/14 20:32:46 - [] D -- C:\ProgramData\Installations
O43 - CFD: 2014/08/04 09:51:46 - [] D -- C:\ProgramData\Le Robert
O43 - CFD: 2014/11/25 09:22:20 - [] D -- C:\ProgramData\MAGIX
O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/09/15 20:12:27 - [] D -- C:\ProgramData\MFAData
O43 - CFD: 2015/09/11 16:47:25 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/06/12 03:22:48 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2014/08/04 09:48:03 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2014/08/01 17:00:32 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2014/08/01 11:26:27 - [] D -- C:\ProgramData\PRICache
O43 - CFD: 2014/08/04 09:38:29 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2015/04/14 19:27:39 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 2014/12/09 08:56:59 - [] D -- C:\ProgramData\simplitec
O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2014/08/20 20:03:14 - [0] AD -- C:\ProgramData\TEMP
O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/09/23 15:54:53 - [] D -- C:\ProgramData\VMware
O43 - CFD: 2014/08/01 15:48:13 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 2014/08/01 16:53:24 - [] D -- C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 2014/08/20 19:44:48 - [] D -- C:\Program Files\Common Files\Autodesk Shared
O43 - CFD: 2014/09/25 12:36:21 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2014/08/20 19:05:04 - [] D -- C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 2014/11/25 09:21:47 - [] D -- C:\Program Files\Common Files\MAGIX Services
O43 - CFD: 2014/09/09 18:48:26 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2012/07/26 08:53:27 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 2014/09/09 18:08:56 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 2014/08/01 12:36:05 - [] D -- C:\Program Files\Common Files\VMware
O43 - CFD: 2015/03/05 04:28:45 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\AdbDriverInstaller
O43 - CFD: 2014/08/21 23:01:48 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Adobe
O43 - CFD: 2015/08/17 21:41:38 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\AIMP3
O43 - CFD: 2014/09/09 17:54:31 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Apowersoft
O43 - CFD: 2014/09/16 19:03:00 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Autodesk
O43 - CFD: 2014/08/01 16:12:15 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 2014/09/09 13:45:37 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\DMCache
O43 - CFD: 2014/08/01 17:02:08 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu
O43 - CFD: 2015/01/14 22:50:17 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\dvdcss
O43 - CFD: 2015/06/16 22:44:09 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Free Download Manager
O43 - CFD: 2014/09/09 17:40:05 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\GetGo Software
O43 - CFD: 2014/09/09 13:53:04 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\IDM
O43 - CFD: 2014/08/20 20:05:39 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Macromedia
O43 - CFD: 2014/11/25 09:22:10 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\MAGIX
O43 - CFD: 2015/09/23 18:00:36 - [] SD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft
O43 - CFD: 2014/08/01 15:50:26 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\pdfforge
O43 - CFD: 2014/11/25 09:23:17 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\PhotoFiltre Studio X
O43 - CFD: 2014/11/25 10:34:07 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\simplitec
O43 - CFD: 2014/09/08 09:36:32 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\SolidDocuments
O43 - CFD: 2015/09/27 08:22:14 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\vlc
O43 - CFD: 2015/04/13 17:21:37 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\VMware
O43 - CFD: 2015/09/15 18:08:30 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\WinBatch
O43 - CFD: 2015/09/29 12:09:48 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP
O43 - CFD: 2014/08/21 23:01:48 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Adobe
O43 - CFD: 2014/08/01 11:22:36 - [0] SHD -- C:\Users\NKOGHE REGIS\AppData\Local\Application Data
O43 - CFD: 2015/04/14 19:26:47 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Apps
O43 - CFD: 2014/08/20 19:55:09 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Autodesk
O43 - CFD: 2015/09/15 20:10:42 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Avg2015
O43 - CFD: 2015/04/14 19:28:09 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Local\Deployment
O43 - CFD: 2015/09/14 08:44:02 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Diagnostics
O43 - CFD: 2015/04/14 19:50:52 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Downloaded Installations
O43 - CFD: 2015/09/23 18:30:47 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2014/09/09 17:40:20 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\GetGo
O43 - CFD: 2015/04/14 19:31:52 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Google
O43 - CFD: 2014/08/01 11:22:36 - [0] SHD -- C:\Users\NKOGHE REGIS\AppData\Local\Historique
O43 - CFD: 2014/08/01 16:23:42 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\IsolatedStorage
O43 - CFD: 2014/08/04 09:53:29 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Le_Petit_Robert
O43 - CFD: 2014/11/25 09:22:08 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\MAGIX
O43 - CFD: 2015/09/15 20:10:42 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\MFAData
O43 - CFD: 2015/08/05 15:43:51 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Microsoft
O43 - CFD: 2015/04/25 12:58:47 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Microsoft Help
O43 - CFD: 2015/07/13 13:33:58 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Packages
O43 - CFD: 2014/08/01 15:49:39 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Programs
O43 - CFD: 2014/08/01 12:48:08 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Schneider Electric
O43 - CFD: 2014/08/01 16:22:56 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\SolidDocuments
O43 - CFD: 2015/09/29 12:29:50 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Temp
O43 - CFD: 2014/08/01 11:22:36 - [0] SHD -- C:\Users\NKOGHE REGIS\AppData\Local\Temporary Internet Files
O43 - CFD: 2014/08/20 19:54:16 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\VirtualStore
O43 - CFD: 2015/04/13 17:21:37 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\VMware
O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/05/28 07:18:13 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2012/07/26 08:53:15 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2014/11/25 09:22:58 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X
O43 - CFD: 2014/09/09 13:59:03 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
O43 - CFD: 2015/09/23 15:35:53 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/08/01 16:26:14 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 10s
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL ©
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL ©
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL ©
O106 - SIOI: AcSignIcon [AutoCAD Digital Signatures Icon Overlay Handler] - {36A21736-36C2-4C11-8ACB-D4136F2B57BD}. (.Autodesk, Inc. - AutoCAD component.) -- C:\Windows\System32\AcSignIcon.dll ©
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll ©
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll ©

---\\ Liste des pilotes du système (80) - 170s
O58 - SDL:2012/07/26 05:42:31 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [85232] ©
O58 - SDL:2012/07/26 05:42:31 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [424176] ©
O58 - SDL:2012/07/26 05:42:31 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [298736] ©
O58 - SDL:2012/07/26 05:42:31 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [147696] ©
O58 - SDL:2012/07/26 05:42:31 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [67312] ©
O58 - SDL:2012/07/26 05:42:31 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [213744] ©
O58 - SDL:2012/07/26 05:42:31 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22256] ©
O58 - SDL:2012/11/30 08:30:58 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amd_sata.sys [70312] ©
O58 - SDL:2012/11/30 08:31:00 A . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\drivers\amd_xata.sys [22184] ©
O58 - SDL:2012/07/26 05:42:30 A . (.PMC-Sierra, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [91888] ©
O58 - SDL:2012/07/26 05:42:30 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [94448] ©
O58 - SDL:2010/02/11 19:38:23 A . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\Windows\System32\drivers\aswFsBlk.sys [19024] ©
O58 - SDL:2010/02/11 19:38:45 A . (.ALWIL Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [51792] ©
O58 - SDL:2010/02/11 19:39:01 A . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [23376] ©
O58 - SDL:2010/02/11 19:42:13 A . (.ALWIL Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [162512] ©
O58 - SDL:2010/02/11 19:42:34 A . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [46672] ©
O58 - SDL:2013/04/27 20:37:50 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [10288640] ©
O58 - SDL:2013/04/27 19:13:24 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [483328] ©
O58 - SDL:2014/09/26 15:53:25 A . (.Connectify - NDISRD helper driver.) -- C:\Windows\System32\drivers\cnnctfy3.sys [36008] ©
O58 - SDL:2014/08/01 12:56:31 A . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys [242240] ©
O58 - SDL:2012/09/07 09:11:36 A . (.Sentelic Corporation - Finger-sensing Pad Driver.) -- C:\Windows\System32\drivers\fspad_win732.sys [55808]
O58 - SDL:2012/08/01 17:10:30 A . (.VMware, Inc. - VMware USB monitor.) -- C:\Windows\System32\drivers\hcmon.sys [41496] ©
O58 - SDL:2012/07/26 05:42:33 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [56048] ©
O58 - SDL:2012/07/26 05:42:33 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [333552] ©
O58 - SDL:2012/07/26 05:42:33 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [42224] ©
O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [93424] ©
O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [78576] ©
O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [100592] ©
O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [68848] ©
O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [45296] ©
O58 - SDL:2012/07/26 05:42:15 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [283888] ©
O58 - SDL:2012/07/26 05:42:15 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [59120] ©
O58 - SDL:2012/07/26 05:42:15 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45808] ©
O58 - SDL:2011/02/11 23:23:34 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [35088] ©
O58 - SDL:2012/07/26 05:42:15 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [120048] ©
O58 - SDL:2012/07/26 05:42:15 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [141552] ©
O58 - SDL:2013/06/04 21:36:08 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [2680136] ©
O58 - SDL:2012/05/31 17:49:12 A . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\System32\drivers\rtl8187B.sys [388240] ©
O58 - SDL:2012/05/02 16:48:54 A . (.Realtek Semiconductor Corporation - Realtek RTL8187S PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8187Se.sys [383592] ©
O58 - SDL:2011/06/20 17:07:08 A . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8192se.sys [1117800] ©
O58 - SDL:2010/12/22 16:24:00 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\Windows\System32\drivers\rtl819xp.sys [559208] ©
O58 - SDL:2013/01/15 15:37:10 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUVStor.sys [242760] ©
O58 - SDL:2013/03/12 18:39:18 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtwlane.sys [1351168] ©
O58 - SDL:2012/07/26 08:52:15 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] ©
O58 - SDL:2012/07/26 05:42:15 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [41200] ©
O58 - SDL:2012/07/26 05:42:16 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [79088] ©
O58 - SDL:2014/12/03 04:01:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [90008] ©
O58 - SDL:2014/12/03 04:01:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [184216] ©
O58 - SDL:2014/12/03 04:01:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\Windows\System32\drivers\ssudserd.sys [184216] ©
O58 - SDL:2012/07/26 05:42:15 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [26352] ©
O58 - SDL:2013/05/22 16:53:40 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [390256] ©
O58 - SDL:2013/11/01 05:02:06 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\Windows\System32\drivers\Thotkey.sys [27024] ©
O58 - SDL:2012/07/25 14:32:50 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\Windows\System32\drivers\TVALZ_O.SYS [27200] ©
O58 - SDL:2012/07/26 05:42:18 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18160] ©
O58 - SDL:2012/07/06 12:29:26 A . (.VMware, Inc. - VMware PCI VMCI Bus Device.) -- C:\Windows\System32\drivers\vmci.sys [71152] ©
O58 - SDL:2012/08/15 15:16:48 A . (.VMware, Inc. - VMware virtual network driver (32-bit).) -- C:\Windows\System32\drivers\vmnet.sys [19608] ©
O58 - SDL:2012/08/15 15:16:48 A . (.VMware, Inc. - VMware virtual network adapter driver (32-b.) -- C:\Windows\System32\drivers\vmnetadapter.sys [16664] ©
O58 - SDL:2012/08/15 15:16:50 A . (.VMware, Inc. - VMware bridge driver (32-bit).) -- C:\Windows\System32\drivers\vmnetbridge.sys [37016] ©
O58 - SDL:2012/08/15 15:18:28 A . (.VMware, Inc. - VMware network application interface driver.) -- C:\Windows\System32\drivers\vmnetuserif.sys [25752] ©
O58 - SDL:2012/08/01 17:10:24 A . (.VMware, Inc. - VMware USB driver.) -- C:\Windows\System32\drivers\vmusb.sys [31280] ©
O58 - SDL:2012/08/15 15:18:38 A . (.VMware, Inc. - VMware kernel driver.) -- C:\Windows\System32\drivers\vmx86.sys [61848] ©
O58 - SDL:2012/07/26 05:42:19 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [155376] ©
O58 - SDL:2012/07/06 12:29:26 A . (.VMware, Inc. - VMware vSockets Service.) -- C:\Windows\System32\drivers\vsock.sys [61296] ©
O58 - SDL:2011/07/12 09:36:28 A . (.VMware, Inc. - VMware Virtual Storage Volume Driver.) -- C:\Windows\System32\drivers\vstor2-mntapi10-shared.sys [22768] ©
O58 - SDL:2012/07/26 05:42:19 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [285424] ©
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2012/07/26 00:52:52 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2012/07/26 00:52:52 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO.SYS [33968]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO404.SYS [34688]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO412.SYS [35552]
O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO804.SYS [34688]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 296s
O61 - LFC: 2015/09/23 18:23:53 A . (..) -- C:\Users\NKOGHE REGIS\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849]

---\\ Associations Shell Spawning (11) - 41s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.scr> [HKCU\..\open\Command] (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\System32\notepad.exe ©

---\\ Menu de démarrage Internet (8) - 9s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (2) - 108s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {F02E6E34-91BC-466F-926E-CE32F7684856} - (Ask Search) - http://websearch.ask.com/ =>Toolbar.Ask

---\\ Enumère les services démarrés par Svchost (35) - 47s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [168960] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [115200] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [115200] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236544] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1285632] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [683520] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [87552] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [302080] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [81920] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49152] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [392192] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [245760] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2601472] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [630272] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [506368] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [741376] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [20992] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [52224] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [115200] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [89088] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [944640] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [166400] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [60928] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [105472] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [170496] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [249344] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [59392] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [73216] ©
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [138752] ©
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [161792] ©
O83 - Search Svchost Services: SystemEventsBroker (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) -- C:\Windows\System32\SystemEventsBrokerServer.dll [117760] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [154112] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [33280] ©
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1532928] ©
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [152064] ©

---\\ Liste des exceptions du parefeu Windows (18) - 199s
O87 - FAEL: "{CC3C41BE-16C9-4920-99F5-9781F2E72392}" [In-None-P6-TRUE] .(...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe
O87 - FAEL: "{C0EEE2D4-4618-4CDF-9AD7-1B79DAD1BD5B}" [In-None-P6-TRUE] .(...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe
O87 - FAEL: "TCP Query User{0C8A3FA1-BBC5-4FCD-BCCF-963F46EE114C}C:\program files\le robert\le petit robert 2014\prnet.exe" [In-None-P6-TRUE] .(.Copyright © 2013 - Le Petit Robert.) -- C:\program files\le robert\le petit robert 2014\prnet.exe
O87 - FAEL: "UDP Query User{3BBBBD43-AFA8-46BC-B2D9-F15D212DC002}C:\program files\le robert\le petit robert 2014\prnet.exe" [In-None-P17-TRUE] .(.Copyright © 2013 - Le Petit Robert.) -- C:\program files\le robert\le petit robert 2014\prnet.exe
O87 - FAEL: "TCP Query User{1C679BAD-1BF9-424E-A061-E8ADA746774E}C:\program files\le robert\le petit robert 2014\petitrobertha.exe" [In-None-P6-TRUE] .(.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\program files\le robert\le petit robert 2014\petitrobertha.exe
O87 - FAEL: "UDP Query User{78F4FAB4-3CC9-49EC-AC0C-BC31EC7D0FC2}C:\program files\le robert\le petit robert 2014\petitrobertha.exe" [In-None-P17-TRUE] .(.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\program files\le robert\le petit robert 2014\petitrobertha.exe
O87 - FAEL: "{EBFE52B2-611A-4695-BAD2-C91BD6B72607}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftSrv.dll
O87 - FAEL: "{4781B858-D0C2-4600-BD67-26F7A1A7EE79}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftSrv.dll
O87 - FAEL: "{FF815760-9BBA-411F-95C7-C3C4ECE3974A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDump.dll
O87 - FAEL: "{01C7D196-CF1B-4CCA-934D-B3815A642B13}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDump.dll
O87 - FAEL: "{70EFA307-7EB8-4B58-B1DA-5F9372F5D54E}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftAC.dll
O87 - FAEL: "{59DFD6AB-54EE-491C-9741-9B2D5394ADB9}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftAC.dll
O87 - FAEL: "{B7D820D2-6C95-4F25-B15D-2449156CC164}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
O87 - FAEL: "{28F3BA45-8355-49B5-A8C3-379621910E96}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
O87 - FAEL: "{B3DA3BAC-81B1-4C48-B19E-2B5ECA3CD925}" [In-None-P17-TRUE] .(.Copyleft GNU GPL v3 - hdsdump.) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
O87 - FAEL: "{E936BF79-F70F-4E79-9C11-D6E0538AFB54}" [Out-None-P17-TRUE] .(.Copyleft GNU GPL v3 - hdsdump.) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
O87 - FAEL: "{802F13C6-2EFB-4BD0-85AE-E8581B7974C5}" [In-None-P6-TRUE] .(...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe
O87 - FAEL: "{BAE3E810-7901-4788-AC0C-8A163FF5E27B}" [In-None-P17-TRUE] .(...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe

---\\ Enumère les codes produits des logiciels (1) - 236s
O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Ask Toolbar.) -- c:\program files\ask.com\fv_1229.ico =>Toolbar.AsktBar

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (18) - 633s

SR - Auto [2014/12/19 08:48:18] [ 81088] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe ©
SR - Auto [2013/04/27 19:40:12] [ 219136] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe ©
SR - Auto [2012/01/31 10:46:56] [ 19232] Autodesk Content Service (Autodesk Content Service) . (.Autodesk, Inc..) - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe ©
SR - Auto [2010/02/11 19:53:39] [ 40384] avast! Antivirus (avast! Antivirus) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe ©
SR - Demand [2010/02/11 19:53:39] [ 40384] avast! Mail Scanner (avast! Mail Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe ©
SR - Demand [2010/02/11 19:53:39] [ 40384] avast! Web Scanner (avast! Web Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe ©
SR - Auto [2014/09/10 21:56:40] [ 487936] Connectify (Connectify) . (.Connectify.) - C:\Program Files\Connectify\ConnectifyService.exe ©
SS - Demand [2014/08/20 19:05:05] [ 1044816] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe ©
SS - Auto [2015/04/14 19:28:20] [ 107848] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/04/14 19:28:20] [ 107848] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe ©
SR - Auto [2013/03/25 18:44:36] [ 164136] SolidPDFCreatorReadSpool (SPDFCreatorReadSpool) . (.Solid Documents, LLC.) - C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe
SR - Auto [2014/12/03 04:01:58] [ 743688] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe ©
SR - Auto [2012/08/15 13:19:58] [ 79872] VMware Authorization Service (VMAuthdService) . (.VMware, Inc..) - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe ©
SR - Auto [2012/08/15 15:18:40] [ 357016] VMware DHCP Service (VMnetDHCP) . (.VMware, Inc..) - C:\Windows\System32\vmnetdhcp.exe ©
SR - Auto [2012/08/01 17:10:26] [ 719512] VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe ©
SR - Auto [2012/08/15 15:17:26] [ 435864] VMware NAT Service (VMware NAT Service) . (.VMware, Inc..) - C:\Windows\System32\vmnat.exe ©
SR - Auto [2012/08/15 14:36:34] [15680000] VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe

---\\ Scan Additionnel (17) - 0s
C:\Program Files\Ask.com\Updater\Updater.exe =>Toolbar.Ask
C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.AsktBar
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AsktBar
C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.Ask
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} =>Toolbar.AsktBar
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} =>Toolbar.AsktBar
HKLM\SOFTWARE\APN =>Toolbar.Ask
HKLM\SOFTWARE\AskToolbar =>Toolbar.Ask
HKCU\SOFTWARE\APN =>Toolbar.Ask
HKCU\SOFTWARE\Ask.com =>Toolbar.Ask
HKCU\SOFTWARE\d5a38e9b5f206c41f8851bf04a251d26 =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\AskToolbar =>Toolbar.Ask
C:\Program Files\Ask.com =>Toolbar.Ask
C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
c:\program files\ask.com\fv_1229.ico =>Toolbar.AsktBar
HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF =>Toolbar.AsktBar
HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF =>Toolbar.AsktBar

---\\ Récapitulatif des éléments trouvées sur votre station (4) - 1s
http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask
http://www.nicolascoolman.fr/blog =>Toolbar.AsktBar
http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/trojan-autokms/ =>HackTool.AutoKMS

~ End of the scan, 39786 items in 8206 seconds (830)(0)()

Publicité


Signaler le contenu de ce document

Publicité